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Reply to Office action of July 3 1 , 2007 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A method of scanning a requested file for a computer 
malware comprising the steps of: 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file, wherein the randomly 
accessed portion of the file is requested utilizing a byte range technique;[[ and]] 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining whether information associated with the file has changed; 
wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism . 

2. (Original) The method of claim 1 , wherein the request to transfer the file from the 
computer malware scanning software comprises a request to transfer the file from an 
external system. 

3. (Original) The method of claim 2, wherein the external system is 
communicatively connected via a network. 

4. (Original) The method of claim 3, wherein the network comprises the Internet. 
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5. (Original) The method of claim 4, wherein the step of transferring the requested 
portion of the file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 

file. 

6. (Original) The method of claim 5, wherein the session is a hypertext transfer 
protocol session. 

7. (Previously Presented) The method of claim 6, wherein the hypertext transfer 
protocol session uses the byte range technique. 

8. (Previously Presented) The method of claim 7, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 

9. (Original) The method of claim 8, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

10. (Original) The method of claim 9, wherein an indication that the requested portion 
of the requested file cannot be randomly accessed comprises an error indication or a 
transfer of the entire requested file. 

11. (Cancelled) 

1 2. (Currently Amended) The method of claim [[1 ]] 1 , wherein the information 
associat e d with the file comprises hypertext transfer protocol entity tags or last modified 
timestamp information. 
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13. (Original) The method of claim 12, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

14. (Previously Presented) The method of claim 13, further comprising the step of: 
transferring an entirety of the requested file. 

15. (Original) The method of claim 1, further comprising the step of: 

performing the steps of claim 1 in response to a request from a user system for the 

file. 

16. (Original) The method of claim 15, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the file includes a computer malware; and 

delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

17. (Previously Presented) The method of claim 16, wherein the step of delivering the 
file to the user system comprises the steps of: 

determining whether an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and delivering 
those portions of the file once they have been transferred. 

1 8. (Original) The method of claim 17, wherein the step of transferring those portions 
of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been transferred. 



A/72206527.1 



Page 4 of 22 



Appl.No. 10/612,996 

Reply to Office action of July 3 1 , 2007 

19. (Original) The method of claim 18, wherein the session is a hypertext transfer 
protocol session. 

20. (Previously Presented) The method of claim 19, wherein the hypertext transfer 
protocol session uses the byte range technique. 

21 . (Currently Amended) A system of scanning a requested file for a computer 
malware virus comprising: 

a processor operable to execute computer program instructions; 
a memory operable to store computer program instructions executable by the 
processor; and 

computer program instructions stored in the memory and executable to perform 
the steps of: 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file, wherein the randomly 
accessed portion of the file is requested utilizing a byte range technique; [[ and]] 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining whether information associated with the file has changed; 
wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism . 

22. (Original) The system of claim 21 , wherein the request to transfer the file from 
the computer malware scanning software comprises a request to transfer the file from an 
external system. 
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23. (Original) The system of claim 22, wherein the external system is 
communicatively connected via a network. 

24. (Original) The system of claim 23, wherein the network comprises the Internet. 

25. (Original) The system of claim 24, wherein the step of transferring the requested 
portion of the file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 

file. 

26. (Original) The system of claim 25, wherein the session is a hypertext transfer 
protocol session. 

27. (Previously Presented) The system of claim 26, wherein the hypertext transfer 
protocol session uses the byte range technique. 

28. (Previously Presented) The system of claim 27, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 

29. (Original) The system of claim 28, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

30. (Original) The system of claim 29, wherein an indication that the requested 
portion of the requested file cannot be randomly accessed comprises an error indication 
or a transfer of the entire requested file. 
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31. (Cancelled) 

32. (Currently Amended) The system of claim [[3]]21, wherein the information 
associat e d with th e fil e comprises hypertext transfer protocol entity tags or last modified 
timestamp information. 

33. (Original) The system of claim 32, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

34. (Previously Presented) The system of claim 33, further comprising the step of: 
transferring an entirety of the requested file. 

35. (Original) The system of claim 21, further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

file. 

36. (Original) The system of claim 35, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the file includes a computer malware; and 

delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

37. (Previously Presented) The system of claim 36, wherein the step of delivering the 
file to the user system comprises the steps of: 

determining whether an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and delivering 
those portions of the file once they have been transferred. 
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38. (Original) The system of claim 37, wherein the step of transferring those portions 
of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been, transferred. 

39. (Original) The system of claim 38, wherein the session is a hypertext transfer 
protocol session. 

40. (Previously Presented) The system of claim 39, wherein the hypertext transfer 
protocol session uses the byte range technique. 

41 . (Currently Amended) A computer program product of scanning a requested file 
for a computer malware comprising: 

a computer readable storage medium; 

computer program instructions, recorded on the computer readable storage 
medium, executable by a processor, for performing the steps of 

receiving a request to transfer a file from computer malware scanning software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file, wherein the randomly 
accessed portion of the file is requested utilizing a byte range technique;[[ and]] 

transferring the requested portion of the file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
file; and 

determining whether information associated with the file has changed: 
wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism. 
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42. (Original) The computer program product of claim 41, wherein the request to 
transfer the file from the computer malware scanning software comprises a request to 
transfer the file from an external system. 

43. (Original) The computer program product of claim 42, wherein the external 
system is communicatively connected via a network. 

44. (Original) The computer program product of claim 43, wherein the network 
comprises the Internet. 

45. (Original) The computer program product of claim 44, wherein the step of 
transferring the requested portion of the file comprises the step of; 

initiating a session with the external system to obtain the requested portion of the 

file. 

46. (Original) The computer program product of claim 45, wherein the session is a 
hypertext transfer protocol session. 

47. (Previously Presented) The computer program product of claim 46, wherein the 
hypertext transfer protocol session uses the byte range technique. 

48. (Previously Presented) The computer program product of claim 47, further 
comprising the steps of: 

determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 
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49. (Original) The computer program product of claim 48, wherein the requested 
portion of the requested file cannot be transferred because the requested portion of the 
requested file cannot be randomly accessed. 

50. (Original) The computer program product of claim 49, wherein an indication that 
the requested portion of the requested file cannot be randomly accessed comprises an 
error indication or a transfer of the entire requested file. 

51. (Cancelled) 

52. (Currently Amended) The computer program product of claim [[5]]4 1 , wherein 
the information associated with th e fil e comprises hypertext transfer protocol entity tags 
or last modified timestamp information. 

53. (Original) The computer program product of claim 52, further comprising the step 
of: 

restarting the requests from the computer malware scanning software for data. 

54. (Previously Presented) The computer program product of claim 53, further 
comprising the step of: 

transferring an entirety of the requested file. 

55. (Original) The computer program product of claim 41 , further comprising the step 
of: 

performing the steps of claim 1 in response to a request from a user system for the 

file. 

56. (Original) The computer program product of claim 55, further comprising the 
steps of: 

scanning at the computer malware scanning software the data comprising a 
portion of the requested file to determine if the file includes a computer malware; and 
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delivering the file to the user system in response to determining that the file does 
not include a computer malware. 

57. (Previously Presented) The computer program product of claim 56, wherein the 
step of delivering the file to the user system comprises the steps of: 

determining whether an entirety of the file has been transferred; 
starting delivery of the file to the user system even if the entire file has not been 
transferred; and 

transferring those portions of the file that have not been transferred and delivering 
those portions of the file once they have been transferred. 

58. (Original) The computer program product of claim 57, wherein the step of 
transferring those portions of the file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the file that 
have not been transferred. 

59. (Original) The computer program product of claim 58, wherein the session is a 
hypertext transfer protocol session. 

60. (Previously Presented) The computer program product of claim 59, wherein the 
hypertext transfer protocol session uses the byte range technique. 

61. (Cancelled) 

62. (Currently Amended) The method of claim 1, wherein the data associated with the 
request from the computer malware scanning software comprises a plurality of [[selected 
]]randomly accessed portions of the requested file. 

63. (Currently Amended) The method of claim 62, wherein the plurality of [[selected 
]]randomly accessed portions of the requested file are read in a random order. 
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64. (Previously Presented) The method of claim 1, wherein a system call handler 
intercepts system level calls made by the computer malware scanning software and 
simulates system level function calls utilized by the computer malware scanning software 
to determine whether the file includes the computer malware. 
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